Help!
I'm having issues connecting my work emails to my phone. Our IT department says that android phones don't support the necessary policies to gain access. iPhones can connect no problem. And oddly Samsung Galaxy S3 is an enterprise ready phone it also works. Seeing how the Galaxy S3 works. I assume that the Galaxy Nexus also has the capability to work if I port the email.apk from the S3?
I ask because I want native support. (i.e. calendar sync, contacts, etc...) I'm using k-9 for now just for the emails. Let me know if anyone has any ideas. Thank!!!
Can you explain more? Are you unable to reach the server? Are you sure you have the correct server address? Do you have Active Sync enabled for your account on Exchange? I sync with Exchange 2007 with no problems.
The problem is I keep getting incorrect username password errors. And when I consulted with our IT department they explained to me it wasn't because I inputted anything in wrong. It was because there are certain Microsoft Exchange security policies that android doesn't support natively.
Sent from my Galaxy Nexus using Tapatalk 2
I don't think that's correct. What's the policy they are enforcing that Android doesn't support?
What ver. of Exchange are you on?
Exact Issue I am facing too . My pl can connect via his Iphone 4 but not me... Never it gets connected.
deepayanneogi said:
Exact Issue I am facing too . My pl can connect via his Iphone 4 but not me... Never it gets connected.
Click to expand...
Click to collapse
What version of Exchange? What policy isn't supported?
2010 exchange , Cannot connect simply on giving credentials.
I've never had a problem. Enter my domain\username and password and the server URL which is different from what it defaults to and I'm good.
Edit: Looks like it might be non-provisional devices?
Issue 2.1 - Failures to provision and synchronize with Android OS
Exchange ActiveSync policies can cause provisioning and synchronization to fail when the devices are customized. Devices are not provisioned if a policy that exceeds these limitations is applied to the users of these devices. This issue is discussed in comment 9 from the following post on the Google Android forum:
http://code.google.com/p/android/issues/detail?id=9426
Edit: Maybe get them to create a new policy for you. Should only take them a second.
Another alternative would be to use an app like TouchDown, it would also provide the added bonus of seperating your e-mail from your phone. If a pin is enforced, it's enforced in touchdown, not the whole phone. a remote wipe only kills touchdown, not the whole phone.. etc.
It's a bit pricey, but very worth it.
deepayanneogi said:
2010 exchange , Cannot connect simply on giving credentials.
Click to expand...
Click to collapse
I use exchange 2010 no problem, and I just migrated a customer to exchange 2010 with a mixed iPhone/Android environment. If it's an authentication issue there are a couple of things to try:
-In the username make sure the format is DOMAIN\Username. So if your domain is ABC and your username is jsmith - it would be "ABC\jsmith" without the quotes.
-Make sure the servername is correct (i.e.: is the fqdn that can be resolved from 3G or from Wifi internally/externally - a lot of folks don't setup the correct DNS internally and mail.company.com may resolve to their website or something).
-Try checking/unchecking Use SSL, and Accept all SSL certificates. Using SSL is always best and Exchange 2010 requires it by default if I'm not mistaken, but unless you've got a trusted SSL certificate installed on the server you may have a problem...but nothing that can't be overcome by this.
-I'm assuming your user is allowed to use a mobile device since your IT person is troubleshooting.
Related
hey guys,
am desperately trying to fix my home based exchange server. it's been running fine with 100% uptime since last december. about a week back i was twiddling with some settings in windows and completely destroyed it.
i lost my backup of the entier machine too (it's pretty much a dedicated box for exchange). hence did a rebuild.
however now i'm just not getting it to start up. symptoms:
- OWA (outlook web access) worked. both secure and insecure modes. works on my pc.
- does not work on my PDA - OWA works but no activesync
- disabled ssh and followed the instructions here
- the phone now gives error support code 85010004 "your account in microsoft exchange server does not have permission to synchronise with your current settings. contact your exchange server administrator."
kind of annoying!
- form based authentication is enabled
- basic authentication and integrated windows authentication are ON
- same error whether or not i require SSL.
any tips?
I occasionally get the exact same error message when I sync with my company's exchange server, I have to do a soft reset on the phone and then it works fine. No idea how to fix it so bump
we had quite a few issues originally and think this is one of them i think.
Most revolved around having a recognised accessible dns address that allowed a direct link.
never got ssl to work.
the other issue was getting appropriate certificates that were private to be issued when creating the sync partnership.
can u sync internally using exchange server via a cradled activesync?
get this 2 work first, then look to external push.
I ended up paying it engineers to get it to work over an sbs 2003 box as it was all to much.
but dns addresses being made public, that were also accessible internally (reverse lookup i think) along with no ssl and certificates being correct were our main hurdles.
issue fixed i'm all live! after all that effort i really feel i should open this up to those who don't want to spend days fixing it up...
check http://forum.xda-developers.com/showthread.php?t=346022. currently looking for testers for 1-2 days before i make a subscription based service!
Hi guys,
Question regarding email format.
When I enter my Exchange Info, I am able to select HTML format. When I send a test email through, it indeed goes through as an HTML message.
However, after awhile (not sure if it is 5 minutes or 5 hours) - the setting changes to PLAIN TEXT and the control is disabled for me to change it. If I remove my account and re-enter it, I am again able to set it up as HTML and send HTML emails. But again, it will revert to PLAIN TEXT.
My question is - is there a way to edit the registry or something that will not allow the phone to select PLAIN TEXT ??? Or what is going on ??? I have searched and as far as I can tell it is probably because the Exchange Server is older - but like I said I AM ABLE TO SET IT UP AND SEND HTML MESSAGES !!!
Thanks,
Ryan
Based on the fact that it changes and then disables the ability to change it, it sounds like it is a policy on the Exchange server.
But isn't it possible to block the Exchange from doing this ???
Possibly by making something ReadOnly ???
No. Policies are set by the server and pushed to the device. Even if you were able to 'make something ReadOnly' it would cause an error on the server and not sync.
My company enforces PIN security on phones that sync to Exchange so i need to enter a 4 digit code to unlock my phone.
thanks for the info. this is really annoying as our company email is html so when i (or anyone else) responds with our phones it jacks the entire email to text...
Exchange Server 2003 doesn't support HTML e-mail for mobile devices...and apparently that's different than the format it supports for regular connected PCs. Exchange Server 2007 has more/better support for mobile devices.
When you first set up the account it (the TP2 client software) doesn't yet know that the remote server is running 2003, but when it communicates with the Exchange server it finds out the sad truth (version 2003) and removes the HTML option. I experienced the same thing before my e-mail host switched to Exchange 2007.
But it is amazing that you can send an HTML e-mail at all...not sure how that works..?
MCbrian said:
Exchange Server 2003 doesn't support HTML e-mail for mobile devices...and apparently that's different than the format it supports for regular connected PCs. Exchange Server 2007 has more/better support for mobile devices.
When you first set up the account it (the TP2 client software) doesn't yet know that the remote server is running 2003, but when it communicates with the Exchange server it finds out the sad truth (version 2003) and removes the HTML option. I experienced the same thing before my e-mail host switched to Exchange 2007.
But it is amazing that you can send an HTML e-mail at all...not sure how that works..?
Click to expand...
Click to collapse
Yes it is amazing - that is why I was thinking there was a ray of hope that it could be forced some way...
I guess I will find out when we are upgrading to Exchange 2007 =)
Basically there are two main flaws which MUST be fixed by HTC!
1) 9 times out of 10 when you try to create a new imap account, the setup doesn't proceed over the incoming server page so you can't configure it at all
2) you can't add untrusted certificate when syncronizing with an exchange server (this function is supported by standard android client and I can't understand why htc removed it!): I'm not able to recieve push corporate mails becouse of this and was forced to use K-9 client (which works as a charm)
HTC must fix these issues as soon as possible, as they make the Desire unusable as a reliable business tool. Seriously
massimax said:
2) you can't add untrusted certificate when syncronizing with an exchange server (this function is supported by standard android client and I can't understand why htc removed it!): I'm not able to recieve push corporate mails becouse of this and was forced to use K-9 client (which works as a charm)
Click to expand...
Click to collapse
When creating my excahnge account, it just asks me if I want to acccept the untrusted certificate and thats it, thats the last I hear about that.
ritdaw said:
When creating my excahnge account, it just asks me if I want to acccept the untrusted certificate and thats it, thats the last I hear about that.
Click to expand...
Click to collapse
It asks me to accept the certificate EVERY TIME it checks the email, even if I always allow it...
massimax said:
It asks me to accept the certificate EVERY TIME it checks the email, even if I always allow it...
Click to expand...
Click to collapse
Odd, mine hasn't ever done that. I've been using a Hero with exchange for 10 months or so and now the desire a few days with no issues.
ritdaw said:
Odd, mine hasn't ever done that. I've been using a Hero with exchange for 10 months or so and now the desire a few days with no issues.
Click to expand...
Click to collapse
I haven't had any problem with corporate exchange certificate when was using my old windows mobile phones nor with my former Androids (Hero and Magic) but with this Desire it's a nightmare. When using K-9 client everything works fine so I think it's HTC client's fault...
Will be interesting to see whether anyone else has the same issue. I can't fault it, works just as well as it did on my Hero!
Untrusted certificate problem...
I've got this problem too, but, I don't know why, after few attempts, the problem is switched off by itself.
I don't know if it is possible to load the certificate into the phone via browser, but you can try this way.
Sending email via outbox without data connection is not possible...
This is another odd issue:
If there is not a data connection, the email client is NOT able to send email. Normally the email clients move email into the outbox folder for a future sending when a data connection will be available.
It's simple to test. You can try this issue, disabling every data connection on your phone.
This is very boring issue, mostly for those people that strongly use email for business.
Any feedback about?
ritdaw said:
Odd, mine hasn't ever done that. I've been using a Hero with exchange for 10 months or so and now the desire a few days with no issues.
Click to expand...
Click to collapse
Exactly the same with me too. Which version of Exchange are you using? If it is 2007 just remove the handset from exchange managed devices then recreate the account on the handset. Might help?
Just to confirm, currently using Exchange 2003.
Weird, the client is working perfectly for me, with Exchange 2007. I wonder what it is about your environment that triggers the problem?
I've setup IMAP acounts many many times with no issues at all on my Magic because of constant re-flashing ROMs ;-) (most of the time with the HTC mail client). Also the 2 IMAP acounts on my desire were setup in minutes with no problem. Maybe your device is faulty?
i had as well no problems setting up my corporate exchange account. it was exactly like on my hero. it showed me a warning about the certificate once, i think i pressed ignore and that's it. no more problems.
Exchange 2003
Cheers
Chaos42
Oh yeah I forgot about the IMAP bit. I use IMAP for my personal email account and again, it worked first time and has worked perfectly since. Same on my G1, though the default client lacked some functionality on there.
Do you have good connectivity when you run through the IMAP set up process? When you enter your details it tries to connect and verify that they are correct, so I wonder whether this is the delay/hang you're seeing?
massimax said:
Basically there are two main flaws which MUST be fixed by HTC!
2) you can't add untrusted certificate when syncronizing with an exchange server (this function is supported by standard android client and I can't understand why htc removed it!): I'm not able to recieve push corporate mails becouse of this and was forced to use K-9 client (which works as a charm)
Click to expand...
Click to collapse
Indeed have this issue with exchange 2003.. Just to bad.. It's so close to being perfect, but now I have do dig out my iphone again..
I've been in touch with HTC customer service. They don't see this as a bug, but agreed to open a feature request to allow 'download and trust certificate' aka TouchDown does..
not had any exchange issues on my desire with exchange 2007 or 2010 as of yet. really pleased with the email client actually, works a lot better than my n97 one did!
So.. with Nexus One's Activsync integration, there was an option "accept all ssl"
With my incredible, it does not have that option (that I can see).. Therefore with a custom certificate from my company's security team, I constantly get warnings for the certificate. Very annoying and prevents me from syncing well.
Thoughts? Solutions?
Please move this to appropriate forum if I'm in wrong place. Thanks in advance.
I allowed me to chose SSL. From in your Exchange Active sync do the following:
Menu -> More -> Settings -> Account Settings
Scroll down to below the password or you can close the virtual keyboard and you should see it.
Thanks for your reply..
However, that option just says "This Server requires an encrypted SSL connection"
The old version had an option to accept all SSL Certificates.
This means, a custom signature coming from a very large technology company's, very extensive IT security team, will be accepted in any way shape or form.
Alternatively, if the certificate is "not from a trusted authority", then you get the warning over and over and over and over.. whether you accept it or not.
my company is using a godaddy cert, it works fine. i tried setting it up for a client who has 07 exchange and a cert, but its not a well signed one, it wouldnt work at all. so not that it is the best solution but u could get a godaddy cert for yourself.
iamodogg said:
I constantly get warnings for the certificate. Very annoying and prevents me from syncing well.
Click to expand...
Click to collapse
What is the warning? Do you know if they have their cert setup correctly?
I'm currently using the Touchdown app and using SSL. I haven't seen any warnings.
Touchdown will work fine. The certificate is obviously custom-built. We are a 60k employee company. They are not going to change the very for the limited android users.
Again, the 2.0 OS had a feature built in that allowed you to choose to accept all certificates.
Thanks for the work around/alternatives. Still hoping for a fix.
-------------------------------------
Sent via the XDA Tapatalk App
i had a clients incredible and it just wouldn't work, they were using a self sign certificate and exchange 07. i tried every setting i could, even after the software update1. yesterday i was determined to get it to work so i searched and searched. It just keep saying it couldnt authenticate. From what I found a couple things could work.
What I did:
I opened the browser and went to the company owa site. https://mail.company.org/owa, then onces there I could log in. I logged in as the user and it asked me to accept the certificate so I did. Then I was able to get into the users box. Then I added the exchange activesync account next and it work with one minor change in the domain field ( i just erased it). Form what I understand the autodiscover service on IIS needs to be running and working. Not 100% sure, but I got it to work so its worth a try.
What I tried, but didnt work:
Several sites said as long as you are connected to the network, but don't have internet then so the setup and it will continue. Then once it is setup then plug the internet back in and it will ask you to accept the cert and u just say yes. the option which you are talking about no longer looks available. Again its worth a try
Hope this helps
Yeah not sure what the OP means by "Custom Cert" as it's either a valid cert from a trusted CA or it's self signed. Nothing in between. I don't know why a company with 60K employees though would not have a valid SSL cert though...
Look at the cert properties and make sure the server name you are using on the phone matches the name on the cert exactly (if you haven't checked that already). This is the "Issued to:" field...
After the OTA update to EC05, I can no longer connect to my exchange 2003 server via Exchange Active Sync. Also had probs with WiFi hotspot not working and the voice search was eff'd up.
Sprint fixed the Hotspot prob and wanted me to prove exchange active sync is working (kinda hard when it won't work on my phone), so I used the techs phone, entered my info and within 2 sec, it had connected and was ready to configure the settings. This proved to them that it wasn't my server but their software.
When configuring, I de-select the SSL and it can't connect to the server, I select SSL and it says Unable to open connection to server due to security error.
Select both SSL and Accept all SSL certificates and get Cannot connect to server, yet as I stated previously, it worked on the tech's phone and he acknowledged that he had a custom build.
Any ideas?
Ded Muppet said:
After the OTA update to EC05, I can no longer connect to my exchange 2003 server via Exchange Active Sync. Also had probs with WiFi hotspot not working and the voice search was eff'd up.
Sprint fixed the Hotspot prob and wanted me to prove exchange active sync is working (kinda hard when it won't work on my phone), so I used the techs phone, entered my info and within 2 sec, it had connected and was ready to configure the settings. This proved to them that it wasn't my server but their software.
When configuring, I de-select the SSL and it can't connect to the server, I select SSL and it says Unable to open connection to server due to security error.
Select both SSL and Accept all SSL certificates and get Cannot connect to server, yet as I stated previously, it worked on the tech's phone and he acknowledged that he had a custom build.
Any ideas?
Click to expand...
Click to collapse
Can you change what port the SSL connection is attempting to use?
Maybe check a phone that it works on and compare the port #s
here is a link where there are lots of others discussing the same issue with various fixes
http://peterkellner.net/2010/08/31/samsung-epic-4g-using-microsoft-exchange-with-godaddy/
this one in particular may be of some help
:
Got it!
Samsung Epic 4g, v2.2.1
Corporate Sync did -not- work for me (i.e. Accounts & Sync>Add Account>Corporate>Email address & Password) even using the “\” instructions above.
What did work for me was using the normal Email accounts setup (i.e. Choose “Email” application> Press -menu- and choose “Add Account”> Enter “Email address” & “Password”> Choose “Exchange Account”>Enter “Domain\Username” -used both domain\username no slash in front, “Password”, “Exchange Server.”
Not sure why there is an option for Corporate option for email (perhaps google apps?) if so many people having issues with it. Anyway, just choose the normal email setup.
Click to expand...
Click to collapse
good luck
I have seen this issue on motorola devices but personally never had this happen to me. I use my phone on a 2003 exchange server. In fact 70 percent of the people at my job have company android phones, either htc or samsung branded. Some motos but moto has problems. One thing i could recommend is download touchdown email app trial and it sometimes kick starts your active sync. I'm also not on stock rom if that makes any difference.
Sent from my SPH-D700 using XDA Premium App